Exploited Vulnerabilities DailyCVE-2025-20393: Cisco Multiple Products
EPSS32.3%No. 988 of 1739 in KEV
CVE year2025listed the same year
Same vendor in KEV100
Same product1
| Field | Value |
|---|---|
| Vendor | Cisco |
| Product | Multiple Products |
| Name | Cisco Multiple Products Improper Input Validation Vulnerability |
| Added to KEV | 2025-12-17 |
| US federal due date | 2025-12-24 |
| Ransomware use | Unknown |
| CWE | CWE-20 |
CISA description
Cisco Secure Email Gateway, Secure Email, AsyncOS Software, and Web Manager appliances contains an improper input validation vulnerability that allows threat actors to execute arbitrary commands with root privileges on the underlying operating system of an affected appliance.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Cisco Multiple Products vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-12-17.